CVE-2025-2011

CVE-2025-2011 PoC By: X3RX3S 하지만 Ash Wesker가 내 코드를 가져다가 자기 배너로 GPT 돌려서 대담하게 가로챘음 ; 여기 참조 --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 '그의' 코드에서 내 닉네임도 볼 수 있음 --' 목적: WordPress 사이트를 대상으로 SQL 인젝션 취약점CVE-2025-2011을 테스트하기 위한 개념 증명PoC 도구. 면책 조항: 소유했거나 테스트에 대한 명시적 서면 허가를 받은 시스템에서 만 사용하세요. 무단...

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...

PT-2025-19874

Name of the Vulnerable Software and Affected Versions Slider & Popup Builder by Depicter for WordPress versions up to and including 3.6.1 Description The Slider & Popup Builder by Depicter plugin for WordPress is susceptible to a generic SQL Injection issue. This is due to insufficient escaping o...

WordPress plugin Slider & Popup Builder by Depicter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2025-2011: Improper Neutralization of Special Elements used in an SQL Command

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

CVE-2024-4389 Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile function in all versions up to, and including, 3.1.1. This makes it possible for authenticated attackers, with contributor access or higher...